Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5084A3927A0011F188D178F8CE1D38B0.roa
File: 5084A3927A0011F188D178F8CE1D38B0.roa (raw, json)
Hash identifier: 4vrWWljPAPs0l9FMI6GfZPQtQ13HFu428dY2CRNYDVw=
Subject key identifier: A3:AA:C2:3D:29:75:D7:3E:2B:61:E8:80:2B:67:F1:CF:BB:AA:B7:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C376
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5084A3927A0011F188D178F8CE1D38B0.roa
Signing time: Tue 07 Jul 2026 12:35:20 +0000
ROA not before: Tue 07 Jul 2026 12:35:15 +0000
ROA not after: Fri 14 Aug 2026 12:35:15 +0000
asID: 9009
IP address blocks: 45.195.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115574 (0x1c376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 12:35:15 2026 GMT
Not After : Aug 14 12:35:15 2026 GMT
Subject: CN=6a4cf288-a097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:cb:6c:86:2d:46:bd:50:e4:76:82:30:80:
87:34:e2:d8:1c:af:15:64:1d:3c:71:9d:84:08:8c:
86:21:1b:f9:8a:b5:5b:75:8a:49:01:b4:33:6a:d5:
a1:1e:a1:c1:3c:17:f8:a7:2a:57:ec:3d:15:bd:72:
73:d1:b4:d6:14:e5:70:3b:71:2a:9c:88:30:f8:61:
56:60:d0:e0:26:52:99:cd:06:3f:9f:0e:85:29:d7:
08:88:ce:f7:fb:85:32:5d:3b:34:42:b4:fc:30:59:
55:98:a7:ec:8a:b8:39:39:25:2c:74:81:be:da:c7:
aa:43:28:d3:f4:58:28:27:38:a6:80:df:b6:55:70:
9e:6b:9a:08:57:b6:d4:f4:e6:bf:fd:3e:cf:94:fc:
87:de:bd:34:80:97:9a:13:2d:ec:b3:b4:00:6a:19:
70:7b:4f:1d:73:35:d5:e9:49:52:98:27:a1:65:8f:
82:61:48:ad:1e:c7:52:60:9c:49:9c:af:fd:a0:ba:
55:86:0b:22:16:c8:6e:85:9a:6c:51:fe:7e:93:7b:
01:3e:c8:94:a0:ee:b6:5d:3d:f9:a9:11:b8:2d:c3:
c5:dd:98:8b:d1:1b:e7:c7:6a:c0:f1:cb:e3:7f:b7:
69:1f:64:36:8e:13:5b:26:80:10:db:79:8e:58:2e:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:C2:3D:29:75:D7:3E:2B:61:E8:80:2B:67:F1:CF:BB:AA:B7:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5084A3927A0011F188D178F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c4:db:a5:e6:f2:5a:78:ec:83:8d:a5:b6:d1:6d:58:6a:87:
70:93:38:e9:c0:c3:f4:58:61:be:2c:c7:6c:ad:5d:05:31:73:
ba:68:d7:e2:4d:db:e0:2e:89:0f:52:33:e9:76:e1:13:e5:f4:
33:ab:b6:d7:ea:c3:0e:d0:17:cf:34:ee:0e:43:88:c6:61:2a:
40:a6:c0:f3:5e:75:29:e4:75:13:12:c3:7f:78:59:da:17:ff:
e7:d9:83:4b:09:b6:c0:47:0f:1d:80:74:51:52:1f:f9:d8:1b:
95:7d:a7:fb:62:b3:e4:09:7a:cb:17:58:3f:94:32:69:d5:57:
3f:2d:ef:24:13:89:db:a2:c6:88:56:c0:8b:ab:cd:a3:58:d9:
91:4f:90:24:62:ca:18:70:a2:2a:9b:cc:57:be:77:37:be:21:
a5:ad:60:bb:47:42:e9:2d:8c:12:ac:7f:b1:7c:74:4b:3f:bd:
20:fd:de:4d:91:82:2c:02:59:ba:c2:b2:7a:10:1d:b7:22:7a:
7e:99:a2:b4:ab:85:df:70:e1:d7:36:0c:de:7f:f1:8c:a6:c3:
2f:0f:87:6c:c0:f0:da:8d:07:19:ec:3d:40:d1:6a:9c:ce:9d:
26:01:e1:fc:f2:44:ac:c3:ce:7d:21:ae:6d:e7:48:ab:04:4e:
bf:60:0f:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcN2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA3MTIzNTE1WhcNMjYwODE0MTIzNTE1WjAYMRYw
FAYDVQQDEw02YTRjZjI4OC1hMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3DLbIYtRr1Q5HaCMICHNOLYHK8VZB08cZ2ECIyGIRv5irVbdYpJAbQz
atWhHqHBPBf4pypX7D0VvXJz0bTWFOVwO3EqnIgw+GFWYNDgJlKZzQY/nw6FKdcI
iM73+4UyXTs0QrT8MFlVmKfsirg5OSUsdIG+2seqQyjT9FgoJzimgN+2VXCea5oI
V7bU9Oa//T7PlPyH3r00gJeaEy3ss7QAahlwe08dczXV6UlSmCehZY+CYUitHsdS
YJxJnK/9oLpVhgsiFshuhZpsUf5+k3sBPsiUoO62XT35qRG4LcPF3ZiL0Rvnx2rA
8cvjf7dpH2Q2jhNbJoAQ23mOWC40GQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKOq
wj0pddc+K2HogCtn8c+7qreTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MDg0QTM5MjdBMDAxMUYxODhEMTc4RjhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPkMA0GCSqGSIb3DQEBCwUA
A4IBAQA8xNul5vJaeOyDjaW20W1YaodwkzjpwMP0WGG+LMdsrV0FMXO6aNfiTdvg
LokPUjPpduET5fQzq7bX6sMO0BfPNO4OQ4jGYSpApsDzXnUp5HUTEsN/eFnaF//n
2YNLCbbARw8dgHRRUh/52BuVfaf7YrPkCXrLF1g/lDJp1Vc/Le8kE4nbosaIVsCL
q82jWNmRT5AkYsoYcKIqm8xXvnc3viGlrWC7R0LpLYwSrH+xfHRLP70g/d5NkYIs
Alm6wrJ6EB23Inp+maK0q4XfcOHXNgzef/GMpsMvD4dswPDajQcZ7D1A0Wqczp0m
AeH88kSsw859Ia5t50irBE6/YA/o
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:54 2026 by rpki-client